Oracle Borrows Security Notice Method from Microsoft

thumbnail Oracle Borrows Security Notice Method from Microsoft

Borrowing a page directly from Microsoft’s playbook, Oracle has implemented an advance notice mechanism for its quarterly release of security patches. Beginning with the first CPU (Critical Patch Update) for 2007, due on Jan. 16, the database server giant is implementing a CPU Pre-Release Announcement that includes the name of version numbers of Oracle products […]

Written By: Ryan Naraine
Jan 11, 2007
Channel Insider content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More

Borrowing a page directly from Microsoft’s playbook, Oracle has implemented an advance notice mechanism for its quarterly release of security patches.

Beginning with the first CPU (Critical Patch Update) for 2007, due on Jan. 16, the database server giant is implementing a CPU Pre-Release Announcement that includes the name of version numbers of Oracle products affected by patches, a total count of vulnerabilities being fixed and a severity score for the most serious product flaws.

Microsoft started offering advance notice on its monthly security bulletins in late 2003, but when word leaked out it was only available for premium customers, the company expanded the mechanism to provide the pre-patch overview to everyone.

Now, Oracle is following suit as part of a larger attempt to improve its highly criticized security response and patch release process. It is also going a step further by providing more details than Microsoft, including the specific product components affected, the actual vulnerability count and “any other information that may be relevant to help organizations plan for the application of the CPU in their environment.”

According to Duncan Harris, senior director of security assurance at Oracle, the new mechanism is aimed at helping customers plan for patch testing and deployment when the updates are eventually shipped.

“While Oracle will try to make CPU Pre-Release Announcements as accurate as possible at the time of their publication, the information they contain may change before the actual publication of the CPU,” Harris said in a blog entry.

Click here for more on how Oracle is trying to improve its security alerts.

“It is our hope that these Pre-Release Announcements will become valuable tools to help security professionals analyze the criticality of the forthcoming CPUs and brief their management to obtain any necessary approvals for a timely application of the CPUs,” he added.

On Jan. 16, Oracle will ship a mega CPU with fixes for 52 vulnerabilities affecting a wide range of database and application server products. The highest CVSS (Common Vulnerablity Scoring System) base score of vulnerabilities across all products is 7.0.

Check out eWEEK.com’s Security Center for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at Ryan Naraine’s eWEEK Security Watch blog.

Recommended for you...

Leadership Roundup: July Adjustments to Executive Benches

July saw major leadership shakeups across the channel, with key C-suite hires at Pipefy, Coro, Snowflake, Chainguard, and more.

Jordan Smith
Aug 1, 2025
July Roundup: AI, Cyber Key to Several M&A Developments

July’s M&A wave spotlighted AI security, with major players like Palo Alto Networks, Darktrace, and TD SYNNEX leading transformative deals.

Jordan Smith
Aug 1, 2025
Lemongrass Debuts Tool to Streamline SAP Clean Core Work

Lemongrass debuts Clean Core AI Accelerator to help SAP users cut complexity, reduce technical debt, and prepare ERP systems for cloud and AI upgrades.

Franklin Okeke
Jul 31, 2025
Trend Micro and Google Cloud Double Down on AI Security

The expanded alliance emphasizes AI-driven defenses, sovereign cloud capabilities, and new anti-scam protections for businesses worldwide.

Allison Francis
Jul 30, 2025
Channel Insider Logo

Channel Insider combines news and technology recommendations to keep channel partners, value-added resellers, IT solution providers, MSPs, and SaaS providers informed on the changing IT landscape. These resources provide product comparisons, in-depth analysis of vendors, and interviews with subject matter experts to provide vendors with critical information for their operations.

Property of TechnologyAdvice. © 2025 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.